Skip to content

Design: Secret Detection Exclusions - MVC

Background

This issue defines the MVC design proposal for a secret detection allowlist that will live within GitLab's UI. The Allowlist enables customers to ignore patterns that they believe generate false positives. Must-have features are outlined in the parent epic. To view the full design vision for the allowlist, visit Design: Secret Detection Exclusions - Vision (#466441 - closed)

Proposal

Design assets

Summary of proposed changes

  • New UI Page: Develop a dedicated page for managing a secret detection allowlist at the project level.
    • The new UI page should be for "Secret detection configuration", with a tab for the allowlist. In the future we will add other tabs to the configuration page for other options such as rule management.
    • For the MVC, the allowlist only needs to support Secret Push Protection
  • Add configuration link to secret detection cards: On the security configuration page, add a new icon button to both secret detection cards for accessing the secret detection configuration page in the UI.

Screenshot_by_Dropbox_Capture

Edited by Michael Fangman